@aws-sdk/client-sso-admin 3.141.0 → 3.150.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (24) hide show
  1. package/CHANGELOG.md +27 -0
  2. package/dist-cjs/protocols/Aws_json1_1.js +185 -308
  3. package/dist-es/protocols/Aws_json1_1.js +297 -309
  4. package/dist-types/SSOAdmin.d.ts +28 -30
  5. package/dist-types/commands/AttachCustomerManagedPolicyReferenceToPermissionSetCommand.d.ts +1 -1
  6. package/dist-types/commands/AttachManagedPolicyToPermissionSetCommand.d.ts +3 -3
  7. package/dist-types/commands/CreateAccountAssignmentCommand.d.ts +5 -5
  8. package/dist-types/commands/CreatePermissionSetCommand.d.ts +1 -1
  9. package/dist-types/commands/DescribeInstanceAccessControlAttributeConfigurationCommand.d.ts +3 -4
  10. package/dist-types/commands/DetachCustomerManagedPolicyReferenceFromPermissionSetCommand.d.ts +1 -1
  11. package/dist-types/commands/DetachManagedPolicyFromPermissionSetCommand.d.ts +1 -1
  12. package/dist-types/commands/ListAccountAssignmentCreationStatusCommand.d.ts +1 -1
  13. package/dist-types/commands/ListAccountAssignmentDeletionStatusCommand.d.ts +1 -1
  14. package/dist-types/commands/ListAccountAssignmentsCommand.d.ts +1 -2
  15. package/dist-types/commands/ListCustomerManagedPolicyReferencesInPermissionSetCommand.d.ts +1 -1
  16. package/dist-types/commands/ListInstancesCommand.d.ts +1 -1
  17. package/dist-types/commands/ListManagedPoliciesInPermissionSetCommand.d.ts +1 -1
  18. package/dist-types/commands/ListPermissionSetProvisioningStatusCommand.d.ts +1 -1
  19. package/dist-types/commands/ListPermissionSetsCommand.d.ts +1 -1
  20. package/dist-types/commands/PutInlinePolicyToPermissionSetCommand.d.ts +1 -1
  21. package/dist-types/commands/PutPermissionsBoundaryToPermissionSetCommand.d.ts +1 -1
  22. package/dist-types/commands/UpdateInstanceAccessControlAttributeConfigurationCommand.d.ts +3 -3
  23. package/dist-types/models/models_0.d.ts +87 -73
  24. package/package.json +11 -6
@@ -1,7 +1,9 @@
1
1
  import { ExceptionOptionType as __ExceptionOptionType } from "@aws-sdk/smithy-client";
2
2
  import { SSOAdminServiceException as __BaseException } from "./SSOAdminServiceException";
3
3
  /**
4
- * <p>The value used for mapping a specified attribute to an identity source. For more information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/attributemappingsconcept.html">Attribute mappings</a> in the Amazon Web Services Single Sign-On User Guide.</p>
4
+ * <p>The value used for mapping a specified attribute to an identity source. For more
5
+ * information, see <a href="https://docs.aws.amazon.com/singlesignon/latest/userguide/attributemappingsconcept.html">Attribute mappings</a>
6
+ * in the <i>Amazon Web Services SSO User Guide</i>.</p>
5
7
  */
6
8
  export interface AccessControlAttributeValue {
7
9
  /**
@@ -13,14 +15,14 @@ export interface AccessControlAttributeValue {
13
15
  * <p>These are Amazon Web Services SSO identity store attributes that you can configure for use in
14
16
  * attributes-based access control (ABAC). You can create permissions policies that determine who
15
17
  * can access your Amazon Web Services resources based upon the configured attribute values. When you enable
16
- * ABAC and specify <code>AccessControlAttributes</code>, Amazon Web Services SSO passes the attribute values
17
- * of the authenticated user into IAM for use in policy evaluation.</p>
18
+ * ABAC and specify <code>AccessControlAttributes</code>, Amazon Web Services SSO passes the attribute values of
19
+ * the authenticated user into IAM for use in policy evaluation.</p>
18
20
  */
19
21
  export interface AccessControlAttribute {
20
22
  /**
21
23
  * <p>The name of the attribute associated with your identities in your identity source. This is
22
- * used to map a specified attribute in your identity source with an attribute in Amazon Web Services
23
- * SSO.</p>
24
+ * used to map a specified attribute in your identity source with an attribute in
25
+ * Amazon Web Services SSO.</p>
24
26
  */
25
27
  Key: string | undefined;
26
28
  /**
@@ -143,21 +145,23 @@ export interface AccountAssignmentOperationStatusMetadata {
143
145
  CreatedDate?: Date;
144
146
  }
145
147
  /**
146
- * <p>Specifies the name and path of the IAM customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.</p>
148
+ * <p>Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.</p>
147
149
  */
148
150
  export interface CustomerManagedPolicyReference {
149
151
  /**
150
- * <p>The name of the policy document.</p>
152
+ * <p>The name of the IAM policy that you have configured in each account where you want to deploy your permission set.</p>
151
153
  */
152
154
  Name: string | undefined;
153
155
  /**
154
- * <p>The path for the policy. The default is <code>/</code>. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names">Friendly names and paths</a> in the Identity and Access Management user guide.</p>
156
+ * <p>The path to the IAM policy that you have configured in each account where you want to deploy your permission set. The default is <code>/</code>. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-friendly-names">Friendly
157
+ * names and paths</a> in the <i>Identity and Access Management User
158
+ * Guide</i>.</p>
155
159
  */
156
160
  Path?: string;
157
161
  }
158
162
  export interface AttachCustomerManagedPolicyReferenceToPermissionSetRequest {
159
163
  /**
160
- * <p>The ARN of the SSO instance under which the operation will be executed. </p>
164
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. </p>
161
165
  */
162
166
  InstanceArn: string | undefined;
163
167
  /**
@@ -165,7 +169,7 @@ export interface AttachCustomerManagedPolicyReferenceToPermissionSetRequest {
165
169
  */
166
170
  PermissionSetArn: string | undefined;
167
171
  /**
168
- * <p>Specifies the name and path of the IAM customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.</p>
172
+ * <p>Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.</p>
169
173
  */
170
174
  CustomerManagedPolicyReference: CustomerManagedPolicyReference | undefined;
171
175
  }
@@ -250,22 +254,22 @@ export declare class ValidationException extends __BaseException {
250
254
  constructor(opts: __ExceptionOptionType<ValidationException, __BaseException>);
251
255
  }
252
256
  /**
253
- * <p>A structure that stores the details of the Amazon Web Services managed IAM policy.</p>
257
+ * <p>A structure that stores the details of the Amazon Web Services managed policy.</p>
254
258
  */
255
259
  export interface AttachedManagedPolicy {
256
260
  /**
257
- * <p>The name of the Amazon Web Services managed IAM policy.</p>
261
+ * <p>The name of the Amazon Web Services managed policy.</p>
258
262
  */
259
263
  Name?: string;
260
264
  /**
261
- * <p>The ARN of the Amazon Web Services managed IAM policy. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
265
+ * <p>The ARN of the Amazon Web Services managed policy. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
262
266
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
263
267
  */
264
268
  Arn?: string;
265
269
  }
266
270
  export interface AttachManagedPolicyToPermissionSetRequest {
267
271
  /**
268
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
272
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
269
273
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
270
274
  */
271
275
  InstanceArn: string | undefined;
@@ -283,7 +287,7 @@ export interface AttachManagedPolicyToPermissionSetResponse {
283
287
  }
284
288
  export interface CreateAccountAssignmentRequest {
285
289
  /**
286
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
290
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
287
291
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
288
292
  */
289
293
  InstanceArn: string | undefined;
@@ -328,16 +332,15 @@ export interface InstanceAccessControlAttributeConfiguration {
328
332
  }
329
333
  export interface CreateInstanceAccessControlAttributeConfigurationRequest {
330
334
  /**
331
- * <p>The ARN of the SSO instance under which the operation will be executed.</p>
335
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed.</p>
332
336
  */
333
337
  InstanceArn: string | undefined;
334
338
  /**
335
- * <p>Specifies the Amazon Web Services SSO identity store attributes to add to your ABAC configuration.
336
- * When using an external identity provider as an identity source, you can pass attributes
337
- * through the SAML assertion. Doing so provides an alternative to configuring attributes from
338
- * the Amazon Web Services SSO identity store. If a SAML assertion passes any of these attributes, Amazon Web Services
339
- * SSO will replace the attribute value with the value from the Amazon Web Services SSO identity
340
- * store.</p>
339
+ * <p>Specifies the Amazon Web Services SSO identity store attributes to add to your ABAC configuration. When
340
+ * using an external identity provider as an identity source, you can pass attributes through the
341
+ * SAML assertion. Doing so provides an alternative to configuring attributes from the Amazon Web Services SSO
342
+ * identity store. If a SAML assertion passes any of these attributes, Amazon Web Services SSO will replace the
343
+ * attribute value with the value from the Amazon Web Services SSO identity store.</p>
341
344
  */
342
345
  InstanceAccessControlAttributeConfiguration: InstanceAccessControlAttributeConfiguration | undefined;
343
346
  }
@@ -368,7 +371,7 @@ export interface CreatePermissionSetRequest {
368
371
  */
369
372
  Description?: string;
370
373
  /**
371
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
374
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
372
375
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
373
376
  */
374
377
  InstanceArn: string | undefined;
@@ -427,7 +430,7 @@ export interface CreatePermissionSetResponse {
427
430
  }
428
431
  export interface DeleteAccountAssignmentRequest {
429
432
  /**
430
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
433
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
431
434
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
432
435
  */
433
436
  InstanceArn: string | undefined;
@@ -460,7 +463,7 @@ export interface DeleteAccountAssignmentResponse {
460
463
  }
461
464
  export interface DeleteInlinePolicyFromPermissionSetRequest {
462
465
  /**
463
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
466
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
464
467
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
465
468
  */
466
469
  InstanceArn: string | undefined;
@@ -473,7 +476,7 @@ export interface DeleteInlinePolicyFromPermissionSetResponse {
473
476
  }
474
477
  export interface DeleteInstanceAccessControlAttributeConfigurationRequest {
475
478
  /**
476
- * <p>The ARN of the SSO instance under which the operation will be executed.</p>
479
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed.</p>
477
480
  */
478
481
  InstanceArn: string | undefined;
479
482
  }
@@ -481,7 +484,7 @@ export interface DeleteInstanceAccessControlAttributeConfigurationResponse {
481
484
  }
482
485
  export interface DeletePermissionsBoundaryFromPermissionSetRequest {
483
486
  /**
484
- * <p>The ARN of the SSO instance under which the operation will be executed. </p>
487
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. </p>
485
488
  */
486
489
  InstanceArn: string | undefined;
487
490
  /**
@@ -493,7 +496,7 @@ export interface DeletePermissionsBoundaryFromPermissionSetResponse {
493
496
  }
494
497
  export interface DeletePermissionSetRequest {
495
498
  /**
496
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
499
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
497
500
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
498
501
  */
499
502
  InstanceArn: string | undefined;
@@ -506,7 +509,7 @@ export interface DeletePermissionSetResponse {
506
509
  }
507
510
  export interface DescribeAccountAssignmentCreationStatusRequest {
508
511
  /**
509
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
512
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
510
513
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
511
514
  */
512
515
  InstanceArn: string | undefined;
@@ -523,7 +526,7 @@ export interface DescribeAccountAssignmentCreationStatusResponse {
523
526
  }
524
527
  export interface DescribeAccountAssignmentDeletionStatusRequest {
525
528
  /**
526
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
529
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
527
530
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
528
531
  */
529
532
  InstanceArn: string | undefined;
@@ -540,7 +543,7 @@ export interface DescribeAccountAssignmentDeletionStatusResponse {
540
543
  }
541
544
  export interface DescribeInstanceAccessControlAttributeConfigurationRequest {
542
545
  /**
543
- * <p>The ARN of the SSO instance under which the operation will be executed.</p>
546
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed.</p>
544
547
  */
545
548
  InstanceArn: string | undefined;
546
549
  }
@@ -566,12 +569,12 @@ export interface DescribeInstanceAccessControlAttributeConfigurationResponse {
566
569
  }
567
570
  export interface DescribePermissionSetRequest {
568
571
  /**
569
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
572
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
570
573
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
571
574
  */
572
575
  InstanceArn: string | undefined;
573
576
  /**
574
- * <p>The ARN of the permission set.</p>
577
+ * <p>The ARN of the permission set. </p>
575
578
  */
576
579
  PermissionSetArn: string | undefined;
577
580
  }
@@ -583,7 +586,7 @@ export interface DescribePermissionSetResponse {
583
586
  }
584
587
  export interface DescribePermissionSetProvisioningStatusRequest {
585
588
  /**
586
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
589
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
587
590
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
588
591
  */
589
592
  InstanceArn: string | undefined;
@@ -633,7 +636,7 @@ export interface DescribePermissionSetProvisioningStatusResponse {
633
636
  }
634
637
  export interface DetachCustomerManagedPolicyReferenceFromPermissionSetRequest {
635
638
  /**
636
- * <p>The ARN of the SSO instance under which the operation will be executed. </p>
639
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. </p>
637
640
  */
638
641
  InstanceArn: string | undefined;
639
642
  /**
@@ -641,7 +644,7 @@ export interface DetachCustomerManagedPolicyReferenceFromPermissionSetRequest {
641
644
  */
642
645
  PermissionSetArn: string | undefined;
643
646
  /**
644
- * <p>Specifies the name and path of the IAM customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.</p>
647
+ * <p>Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.</p>
645
648
  */
646
649
  CustomerManagedPolicyReference: CustomerManagedPolicyReference | undefined;
647
650
  }
@@ -649,7 +652,7 @@ export interface DetachCustomerManagedPolicyReferenceFromPermissionSetResponse {
649
652
  }
650
653
  export interface DetachManagedPolicyFromPermissionSetRequest {
651
654
  /**
652
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
655
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
653
656
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
654
657
  */
655
658
  InstanceArn: string | undefined;
@@ -667,7 +670,7 @@ export interface DetachManagedPolicyFromPermissionSetResponse {
667
670
  }
668
671
  export interface GetInlinePolicyForPermissionSetRequest {
669
672
  /**
670
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
673
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
671
674
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
672
675
  */
673
676
  InstanceArn: string | undefined;
@@ -678,13 +681,13 @@ export interface GetInlinePolicyForPermissionSetRequest {
678
681
  }
679
682
  export interface GetInlinePolicyForPermissionSetResponse {
680
683
  /**
681
- * <p>The IAM inline policy that is attached to the permission set.</p>
684
+ * <p>The inline policy that is attached to the permission set.</p>
682
685
  */
683
686
  InlinePolicy?: string;
684
687
  }
685
688
  export interface GetPermissionsBoundaryForPermissionSetRequest {
686
689
  /**
687
- * <p>The ARN of the SSO instance under which the operation will be executed. </p>
690
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. </p>
688
691
  */
689
692
  InstanceArn: string | undefined;
690
693
  /**
@@ -693,20 +696,28 @@ export interface GetPermissionsBoundaryForPermissionSetRequest {
693
696
  PermissionSetArn: string | undefined;
694
697
  }
695
698
  /**
696
- * <p>Specifies the configuration of the Amazon Web Services managed or customer managed policy that you want to set as a permissions boundary. Specify either <code>CustomerManagedPolicyReference</code>
697
- * to use the name and path of a customer managed policy, or <code>ManagedPolicyArn</code> to use the ARN of an Amazon Web Services managed IAM policy. A permissions boundary represents the maximum permissions that any policy
698
- * can grant your role. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html">Permissions boundaries for IAM entities</a> in the <i>Identity and Access Management User Guide</i>.</p>
699
+ * <p>Specifies the configuration of the Amazon Web Services managed or customer managed policy that you want
700
+ * to set as a permissions boundary. Specify either <code>CustomerManagedPolicyReference</code>
701
+ * to use the name and path of a customer managed policy, or <code>ManagedPolicyArn</code> to use
702
+ * the ARN of an Amazon Web Services managed policy. A permissions boundary represents the maximum permissions
703
+ * that any policy can grant your role. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_boundaries.html">Permissions boundaries for IAM
704
+ * entities</a> in the <i>Identity and Access Management User Guide</i>.</p>
699
705
  * <important>
700
- * <p>Policies used as permissions boundaries do not provide permissions. You must also attach an IAM policy to the role. To learn how the effective permissions for a role are evaluated, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html">IAM JSON policy evaluation logic</a> in the <i>Identity and Access Management User Guide</i>.</p>
706
+ * <p>Policies used as permissions boundaries don't provide permissions. You must also attach
707
+ * an IAM policy to the role. To learn how the effective permissions for a role are
708
+ * evaluated, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_evaluation-logic.html">IAM JSON policy
709
+ * evaluation logic</a> in the <i>Identity and Access Management User
710
+ * Guide</i>.</p>
701
711
  * </important>
702
712
  */
703
713
  export interface PermissionsBoundary {
704
714
  /**
705
- * <p>Specifies the name and path of the IAM customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.</p>
715
+ * <p>Specifies the name and path of a customer managed policy. You must have an IAM policy that matches the name and path in each Amazon Web Services account where you want to deploy your permission set.</p>
706
716
  */
707
717
  CustomerManagedPolicyReference?: CustomerManagedPolicyReference;
708
718
  /**
709
- * <p>The Amazon Web Services managed policy ARN that you want to attach to a permission set as a permissions boundary.</p>
719
+ * <p>The Amazon Web Services managed policy ARN that you want to attach to a permission set as a permissions
720
+ * boundary.</p>
710
721
  */
711
722
  ManagedPolicyArn?: string;
712
723
  }
@@ -717,16 +728,16 @@ export interface GetPermissionsBoundaryForPermissionSetResponse {
717
728
  PermissionsBoundary?: PermissionsBoundary;
718
729
  }
719
730
  /**
720
- * <p>Provides information about the SSO instance.</p>
731
+ * <p>Provides information about the Amazon Web Services SSO instance.</p>
721
732
  */
722
733
  export interface InstanceMetadata {
723
734
  /**
724
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
735
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
725
736
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
726
737
  */
727
738
  InstanceArn?: string;
728
739
  /**
729
- * <p>The identifier of the identity store that is connected to the SSO instance.</p>
740
+ * <p>The identifier of the identity store that is connected to the Amazon Web Services SSO instance.</p>
730
741
  */
731
742
  IdentityStoreId?: string;
732
743
  }
@@ -741,7 +752,7 @@ export interface OperationStatusFilter {
741
752
  }
742
753
  export interface ListAccountAssignmentCreationStatusRequest {
743
754
  /**
744
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
755
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
745
756
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
746
757
  */
747
758
  InstanceArn: string | undefined;
@@ -770,7 +781,7 @@ export interface ListAccountAssignmentCreationStatusResponse {
770
781
  }
771
782
  export interface ListAccountAssignmentDeletionStatusRequest {
772
783
  /**
773
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
784
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
774
785
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
775
786
  */
776
787
  InstanceArn: string | undefined;
@@ -799,7 +810,7 @@ export interface ListAccountAssignmentDeletionStatusResponse {
799
810
  }
800
811
  export interface ListAccountAssignmentsRequest {
801
812
  /**
802
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
813
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
803
814
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
804
815
  */
805
816
  InstanceArn: string | undefined;
@@ -836,7 +847,7 @@ export declare enum ProvisioningStatus {
836
847
  }
837
848
  export interface ListAccountsForProvisionedPermissionSetRequest {
838
849
  /**
839
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
850
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
840
851
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
841
852
  */
842
853
  InstanceArn: string | undefined;
@@ -870,11 +881,11 @@ export interface ListAccountsForProvisionedPermissionSetResponse {
870
881
  }
871
882
  export interface ListCustomerManagedPolicyReferencesInPermissionSetRequest {
872
883
  /**
873
- * <p>The ARN of the SSO instance under which the operation will be executed. </p>
884
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. </p>
874
885
  */
875
886
  InstanceArn: string | undefined;
876
887
  /**
877
- * <p>The ARN of the <code>PermissionSet</code>.</p>
888
+ * <p>The ARN of the <code>PermissionSet</code>. </p>
878
889
  */
879
890
  PermissionSetArn: string | undefined;
880
891
  /**
@@ -882,17 +893,20 @@ export interface ListCustomerManagedPolicyReferencesInPermissionSetRequest {
882
893
  */
883
894
  MaxResults?: number;
884
895
  /**
885
- * <p>The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.</p>
896
+ * <p>The pagination token for the list API. Initially the value is null. Use the output of
897
+ * previous API calls to make subsequent calls.</p>
886
898
  */
887
899
  NextToken?: string;
888
900
  }
889
901
  export interface ListCustomerManagedPolicyReferencesInPermissionSetResponse {
890
902
  /**
891
- * <p>Specifies the names and paths of the IAM customer managed policies that you have attached to your permission set.</p>
903
+ * <p>Specifies the names and paths of the customer managed policies that you have attached to
904
+ * your permission set.</p>
892
905
  */
893
906
  CustomerManagedPolicyReferences?: CustomerManagedPolicyReference[];
894
907
  /**
895
- * <p>The pagination token for the list API. Initially the value is null. Use the output of previous API calls to make subsequent calls.</p>
908
+ * <p>The pagination token for the list API. Initially the value is null. Use the output of
909
+ * previous API calls to make subsequent calls.</p>
896
910
  */
897
911
  NextToken?: string;
898
912
  }
@@ -908,7 +922,7 @@ export interface ListInstancesRequest {
908
922
  }
909
923
  export interface ListInstancesResponse {
910
924
  /**
911
- * <p>Lists the SSO instances that the caller has access to.</p>
925
+ * <p>Lists the Amazon Web Services SSO instances that the caller has access to.</p>
912
926
  */
913
927
  Instances?: InstanceMetadata[];
914
928
  /**
@@ -918,7 +932,7 @@ export interface ListInstancesResponse {
918
932
  }
919
933
  export interface ListManagedPoliciesInPermissionSetRequest {
920
934
  /**
921
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
935
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
922
936
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
923
937
  */
924
938
  InstanceArn: string | undefined;
@@ -938,7 +952,7 @@ export interface ListManagedPoliciesInPermissionSetRequest {
938
952
  }
939
953
  export interface ListManagedPoliciesInPermissionSetResponse {
940
954
  /**
941
- * <p>The array of the <a>AttachedManagedPolicy</a> data type object.</p>
955
+ * <p>An array of the <a>AttachedManagedPolicy</a> data type object.</p>
942
956
  */
943
957
  AttachedManagedPolicies?: AttachedManagedPolicy[];
944
958
  /**
@@ -948,7 +962,7 @@ export interface ListManagedPoliciesInPermissionSetResponse {
948
962
  }
949
963
  export interface ListPermissionSetProvisioningStatusRequest {
950
964
  /**
951
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
965
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
952
966
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
953
967
  */
954
968
  InstanceArn: string | undefined;
@@ -995,7 +1009,7 @@ export interface ListPermissionSetProvisioningStatusResponse {
995
1009
  }
996
1010
  export interface ListPermissionSetsRequest {
997
1011
  /**
998
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1012
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
999
1013
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
1000
1014
  */
1001
1015
  InstanceArn: string | undefined;
@@ -1020,7 +1034,7 @@ export interface ListPermissionSetsResponse {
1020
1034
  }
1021
1035
  export interface ListPermissionSetsProvisionedToAccountRequest {
1022
1036
  /**
1023
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1037
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1024
1038
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
1025
1039
  */
1026
1040
  InstanceArn: string | undefined;
@@ -1053,7 +1067,7 @@ export interface ListPermissionSetsProvisionedToAccountResponse {
1053
1067
  }
1054
1068
  export interface ListTagsForResourceRequest {
1055
1069
  /**
1056
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1070
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1057
1071
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
1058
1072
  */
1059
1073
  InstanceArn: string | undefined;
@@ -1082,7 +1096,7 @@ export declare enum ProvisionTargetType {
1082
1096
  }
1083
1097
  export interface ProvisionPermissionSetRequest {
1084
1098
  /**
1085
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1099
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1086
1100
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
1087
1101
  */
1088
1102
  InstanceArn: string | undefined;
@@ -1107,7 +1121,7 @@ export interface ProvisionPermissionSetResponse {
1107
1121
  }
1108
1122
  export interface PutInlinePolicyToPermissionSetRequest {
1109
1123
  /**
1110
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1124
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1111
1125
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
1112
1126
  */
1113
1127
  InstanceArn: string | undefined;
@@ -1116,7 +1130,7 @@ export interface PutInlinePolicyToPermissionSetRequest {
1116
1130
  */
1117
1131
  PermissionSetArn: string | undefined;
1118
1132
  /**
1119
- * <p>The IAM inline policy to attach to a <a>PermissionSet</a>.</p>
1133
+ * <p>The inline policy to attach to a <a>PermissionSet</a>.</p>
1120
1134
  */
1121
1135
  InlinePolicy: string | undefined;
1122
1136
  }
@@ -1124,7 +1138,7 @@ export interface PutInlinePolicyToPermissionSetResponse {
1124
1138
  }
1125
1139
  export interface PutPermissionsBoundaryToPermissionSetRequest {
1126
1140
  /**
1127
- * <p>The ARN of the SSO instance under which the operation will be executed. </p>
1141
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. </p>
1128
1142
  */
1129
1143
  InstanceArn: string | undefined;
1130
1144
  /**
@@ -1140,7 +1154,7 @@ export interface PutPermissionsBoundaryToPermissionSetResponse {
1140
1154
  }
1141
1155
  export interface TagResourceRequest {
1142
1156
  /**
1143
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1157
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1144
1158
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
1145
1159
  */
1146
1160
  InstanceArn: string | undefined;
@@ -1157,7 +1171,7 @@ export interface TagResourceResponse {
1157
1171
  }
1158
1172
  export interface UntagResourceRequest {
1159
1173
  /**
1160
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1174
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1161
1175
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
1162
1176
  */
1163
1177
  InstanceArn: string | undefined;
@@ -1174,7 +1188,7 @@ export interface UntagResourceResponse {
1174
1188
  }
1175
1189
  export interface UpdateInstanceAccessControlAttributeConfigurationRequest {
1176
1190
  /**
1177
- * <p>The ARN of the SSO instance under which the operation will be executed.</p>
1191
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed.</p>
1178
1192
  */
1179
1193
  InstanceArn: string | undefined;
1180
1194
  /**
@@ -1186,7 +1200,7 @@ export interface UpdateInstanceAccessControlAttributeConfigurationResponse {
1186
1200
  }
1187
1201
  export interface UpdatePermissionSetRequest {
1188
1202
  /**
1189
- * <p>The ARN of the SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1203
+ * <p>The ARN of the Amazon Web Services SSO instance under which the operation will be executed. For more information about ARNs, see <a href="/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource
1190
1204
  * Names (ARNs) and Amazon Web Services Service Namespaces</a> in the <i>Amazon Web Services General Reference</i>.</p>
1191
1205
  */
1192
1206
  InstanceArn: string | undefined;
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@aws-sdk/client-sso-admin",
3
3
  "description": "AWS SDK for JavaScript Sso Admin Client for Node.js, Browser and React Native",
4
- "version": "3.141.0",
4
+ "version": "3.150.0",
5
5
  "scripts": {
6
6
  "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
7
7
  "build:cjs": "tsc -p tsconfig.cjs.json",
@@ -18,9 +18,9 @@
18
18
  "dependencies": {
19
19
  "@aws-crypto/sha256-browser": "2.0.0",
20
20
  "@aws-crypto/sha256-js": "2.0.0",
21
- "@aws-sdk/client-sts": "3.141.0",
21
+ "@aws-sdk/client-sts": "3.150.0",
22
22
  "@aws-sdk/config-resolver": "3.130.0",
23
- "@aws-sdk/credential-provider-node": "3.141.0",
23
+ "@aws-sdk/credential-provider-node": "3.150.0",
24
24
  "@aws-sdk/fetch-http-handler": "3.131.0",
25
25
  "@aws-sdk/hash-node": "3.127.0",
26
26
  "@aws-sdk/invalid-dependency": "3.127.0",
@@ -36,15 +36,15 @@
36
36
  "@aws-sdk/node-config-provider": "3.127.0",
37
37
  "@aws-sdk/node-http-handler": "3.127.0",
38
38
  "@aws-sdk/protocol-http": "3.127.0",
39
- "@aws-sdk/smithy-client": "3.137.0",
39
+ "@aws-sdk/smithy-client": "3.142.0",
40
40
  "@aws-sdk/types": "3.127.0",
41
41
  "@aws-sdk/url-parser": "3.127.0",
42
42
  "@aws-sdk/util-base64-browser": "3.109.0",
43
43
  "@aws-sdk/util-base64-node": "3.55.0",
44
44
  "@aws-sdk/util-body-length-browser": "3.55.0",
45
45
  "@aws-sdk/util-body-length-node": "3.55.0",
46
- "@aws-sdk/util-defaults-mode-browser": "3.137.0",
47
- "@aws-sdk/util-defaults-mode-node": "3.137.0",
46
+ "@aws-sdk/util-defaults-mode-browser": "3.142.0",
47
+ "@aws-sdk/util-defaults-mode-node": "3.142.0",
48
48
  "@aws-sdk/util-user-agent-browser": "3.127.0",
49
49
  "@aws-sdk/util-user-agent-node": "3.127.0",
50
50
  "@aws-sdk/util-utf8-browser": "3.109.0",
@@ -61,6 +61,11 @@
61
61
  "typedoc": "0.19.2",
62
62
  "typescript": "~4.6.2"
63
63
  },
64
+ "overrides": {
65
+ "typedoc": {
66
+ "typescript": "~4.6.2"
67
+ }
68
+ },
64
69
  "engines": {
65
70
  "node": ">=12.0.0"
66
71
  },